CVE-2014-7607

The Swamiji.tv (org.yidl.SwamijiTV) Android app, version 2.0, does not verify X.509 certificates from SSL servers, allowing a man-in-the-middle to spoof servers and obtain sensitive data via a crafted certificate. This vulnerability, as documented in CVE-2014-7607 (NVD entry), has a CVSS v2 base ...